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In the Claims: 




1 . (Currently Amended) A method of generating an RSA cryptographic value, 
the metnod comprising the steps of: 

obtaining user specific information about a user; and 

dividing the-apotential range of RSA prime values into at least two subintervals; 

selecting\ first user-dependent RSA prime from a range of RSA prime values in a 
first of the at least ™ subintervals corresponding to a user specific range of values based on 
the user specific information mapped onto the first subintervaL 




2. 



(Original) \A method according to Claim 1, further comprising the steps 



of: 



selecting a second user-dependent RSA prime from a range of RSA prime values in a 
second of the at least two subintervals, different from the first subinterval, corresponding to 
the user specific range of values based\n the user specific information mapped onto the 
second subinterval. 

3. (Original) A method accorcHiig to Claim 1, wherein the user specific range 
of values are mapped by linearly mapping the use^ specific range of values onto the first 
subinterval. 

4. (Original) A method according to Claim 2, wherein the user specific range 
of values are mapped onto the first subinterval and mappea\pnto the second subinterval 
utilizing the same mapping function. 



5. (Original) A method according to Claim 2, further comprising the step of 
generating a user-dependent RSA key value from the first and secomi user-dependent primes. 



6. (Original) A method according to Claim 1, wherein the RSA prime values 
comprise n bits and wherein the first subinterval comprises RSA prime values from the set 
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[^2(2 n ~ l )> 2 n ~ l + 2 n ~ 3/ 2 ] and the second subinterval comprises RSA prime values from 
thes\r 2"- 1 +2"- 3/2 J 2"]. 

7. \ (Original) A method according to claim 2, wherein the RSA prime values 
comprise n bitsSind wherein the difference between the first RSA prime and the second RSA 
prime is greater th^n 2 n ~ 2 . 

I \ 

8. (OriginalK A method according to Claim 3, wherein the first subinterval 

comprises an interval [a,b],\vherein the user specific range comprises an interval [c,d] and 

wherein the linear mapping fruition comprises the function defined by, 

x , a\- c , be -ad 

F(x) = wc + v, where u = — V— and v = . 

b -\i b - a 

9. (Original) A method according to Claim 1 further comprising the step of 
selecting a second RSA prime from the potential range of RSA prime values. 

1 0. (Original) A method according to Claim 1 , wherein the user specific 
information is biometric information. \ 

1 1 . (Original) A method according to Clairii 1 , wherein the user specific 
information is a globally unique user identification. \ 

12. (Original) A method according to Claim 1, whWein the step of selecting a 
first user-dependent RSA prime comprises the steps of: \ 

selecting a random point in the range of RSA prime values in ffle first subinterval 
corresponding to the mapped user specific range of values; \ 

utilizing the random point as a starting point for a search for a primeNiumber (p) in the 
range of RSA prime values in the first subinterval corresponding to the mapped user specific 
range of values. \ 
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13. (Original) A method according to Claim 12, further comprising the steps 
of: \ 

determining if a candidate for p is considered outside the range of RSA prime values 
in the first subinterval corresponding to the mapped user specific range of values; 

selecting a\new random point as a search starting point if a candidate for p is 
considered outside me range of RSA prime values in the first subinterval corresponding to the 
mapped user specific iWge of values; and 

restarting the search for p utilizing the new random point. 

14. (Currently Amended) A system for generating an RSA cryptographic value, 
comprising: \ 

means for obtaining user specific information about a user; and 

means for determining a user specific range of values based on the user specific 
information; \ 

means for dividing the-a_potential nmge of RSA prime values into at least two 
sub intervals; \ 

means for mapping the user specific range of values onto a first of the at least two 
subintervals; and \ 

means for selecting a first user-dependent RIS^ prime from the range of RSA prime 
values in the first of the at least two subintervals correstoonding to the mapped user specific 
range of values. \ 

15. (Original) A system according to Claim VL further comprising: 

means for mapping the user specific range of values onro a second of the at least two 
subintervals, different from the first of the at least two subintervals; 

means for selecting a second user-dependent RSA prime from the range of RSA prime 
values in the second of the at least two subintervals corresponding to \he mapped user 
specific range of values. \ 
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K 



16. (Original) A system according to Claim 1 5, wherein the means for 
mapping comprises means for linearly mapping the user specific range of values onto a first 
of the at lea^t two subintervals. 

17. (Original) A system according to Claim 16, wherein the means for 
•mapping the user specific range of values onto a first of the at least two subintervals and the 
means for mapping the user specific range of values onto a second of the at least two 
subintervals, different from the first of the at least two subintervals utilize the same mapping 
function. 

18. (Original) V. system according to Claim 15, further comprising means for 
generating a user-dependent RSX key value from the first and second user-dependent primes. 





19. (Original) A system according to Claim 14, wherein the RSA prime values 
comprise n bits and wherein the first subinfcerval comprises RSA prime values from the set 

[42{2 n ~ l ), 2 n ~ l +2 n ~ 3/2 ] and the second su^interval comprises RSA prime values from 
the set [ 2 n ~ l +2 n ~ 3/2 a n l 

20. (Original) A system according to cWim 15, wherein the RSA prime values 
comprise n bits and wherein the difference between the o^st RSA prime and the second RSA 
prime is greater than 2 n ~ 2 . 

2 1 . (Original) A system according to Claim 1 6, Vherein the first subinterval 

comprises an interval [a,b], wherein the user specific range comprises an interval [c,d] and 

wherein the linear mapping function comprises the function definecN^y, 

. u d-c , be -ad 
F(x) = ux + v, where u = and v = 
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\ 22. (Original) A system according to Claim 14 further comprising means for 
selecting a second RS A prime from the potential range of RSA prime values. 

2a (Original) A system according to Claim 14, wherein the user specific 
informations^ biometric information. 

24. (Original) A system according to Claim 14, wherein the user specific 
information is a globally unique user identification. 

25. (Origiri&l) A system according to Claim 14, wherein the means for 
selecting a first user-depbmdent RSA prime comprises: 

means for selecting^ random point in the range of RSA prime values in the first of 
the at least two subintervals corresponding to the mapped user specific range of values; 

means for utilizing the random point as a starting point for a search for a prime 
number (p) in the range of RSA prime values in the first of the at least two subintervals 
corresponding to the mapped user specific range of values. 

26. (Original) A system according to Claim 25, further comprising: 
means for determining if a candidate ibr p is considered outside the range of RSA 

prime values in the first of the at least two subintervals corresponding to the mapped user 
specific range of values; \ 

means for selecting a new random point as a\earch starting point if a candidate for p 
is considered outside the range of RSA prime values inSthe first of the at least two 
subintervals corresponding to the mapped user specific range of values; and 

means for restarting the search for p utilizing the new random point. 

27. (Currently Amended) A computer program product for generating an RSA 
cryptographic value, comprising: \ 
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\a computer readable storage medium having computer readable program code means 
embodied\in said medium, said computer readable program code means comprising: 

comWter-readable program code means for obtaining user specific information about 
a user; and \ 

computerureadable program code means for determining a user specific range of 
values based on theoiser specific information; 

computer-reacfcable program code means for dividing the-ajsotential range of RSA 
prime values into at least two subintervals; 

computer-readableWogram code means for mapping the user specific range of values 
onto a first of the at least two\subintervals; and 

computer-readable program code means for selecting a first user-dependent RSA 
prime from the range of RSA prime values in the first of the at least two subintervals 
corresponding to the mapped user specific range of values. 

28. (Original) A computer^program product according to Claim 27, further 
comprising: \ 

computer-readable program code meank for mapping the user specific range of values 
onto a second of the at least two subintervals, different from the first of the at least two 
subintervals; \ 

computer-readable program code means for selecting a second user-dependent RSA 
prime from the range of RSA prime values in the seconasof the at least two subintervals 
corresponding to the mapped user specific range of values\ 

29. (Original) A computer program product according to Claim 28, wherein 
the computer-readable program code means for mapping comprises computer-readable 
program code means for linearly mapping the user specific range of values onto a first of the 
at least two subintervals. \ 
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(Original) A computer program product according to Claim 29, wherein 
the computer-readable program code means for mapping the user specific range of values 
onto a first oMie at least two subintervals and the computer-readable program code means 
for mapping theSuser specific range of values onto a second of the at least two subintervals, 
different from the^first of the at least two subintervals utilize the same mapping function. 

31 . (Original) A computer program product according to Claim 28, further 
comprising computer readable code means for generating a user-dependent RS A key value 
from the first and second user-dependent primes. 

32. (Original) A computer program product according to Claim 26, wherein 
the RSA prime values comprise n bits and wherein the first subinterval comprises RS A prime 

values from the set [ V2(2 /2_1 ), 2 n ~ l \2"~ 3/2 ] and the second subinterval comprises RSA 
prime values from the set [ 2 n ' X + 2 n ~ 3/ \2 n ]. 

33. (Original) A computer prognim product according to claim 28, wherein 
the RSA prime values comprise n bits and wherem the difference between the first RSA 
prime and the second RSA prime is greater than 2 n ~ 

34. (Original) A computer program product according to Claim 29, wherein 
the first subinterval comprises an interval [a,b], wherein the user specific range comprises an 
interval [c,d] and wherein the linear mapping function composes the function defined by, 

F(x) = ux + v, where u = — — - and v = ^ — — 

b — a b — a 

35. (Original) A computer program product accordingto Claim 27 further 
comprising computer-readable program code means for selecting a secc^id RSA prime from 
the potential range of RSA prime values. 
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^6. (Original) A computer program product according to Claim 27, wherein 
the user specific information is biometric information. 

37. VOriginal) A computer program product according to Claim 27, wherein 
the user specific Viformation is a globally unique user identification. 

38. (Original) A computer program product according to Claim 27, wherein 
the computer-readable program code means for selecting a first user-dependent RS A prime 
comprises: \ 

computer-readable program code means for selecting a random point in the range of 
RSA prime values in the firstW the at least two subintervals corresponding to the mapped 
user specific range of values; \ 

computer-readable progrark code means for utilizing the random point as a starting 
point for a search for a prime numbek(p) in the range of RSA prime values in the first of the 
at least two subintervals corresponding\o the mapped user specific range of values. 

39. (Original) A computer program product according to Claim 38, further 
comprising: \ 

computer-readable program code means ibr determining if a candidate for p is 
considered outside the range of RSA prime valuesVi the first of the at least two subintervals 
corresponding to the mapped user specific range of values; 

computer-readable program code means for selecting a new random point as a search 
starting point if a candidate for p is considered outside tne range of RSA prime values in the 
first of the at least two subintervals corresponding to the mapped user specific range of 
values; and \ 

computer-readable program code means for restarting tite search for p utilizing the 
new random point. \ 
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Vo. (Original) A method of generating a cryptographic value corresponding to 
a source entity, the method comprising the steps of: 

obtaining entity specific information associated with the source entity; 

selecting a cryptographic value from a range of cryptographic values based on the 
entity specific information, wherein the range of cryptographic values based on the entity 
specific information is disjoint with ranges of cryptographic values associated with entity 
specific informatioimssociated with entities other than the source entity. 

41 . (Original/^ A method according to Claim 40, wherein the entity specific 
information comprises bionoetric information associated with a user. 

42. (Original) Amethod according to Claim 40, wherein the entity specific 
information comprises a globallyVnique user identification associated with a user. 

43. (Original) A method according to Claim 40, wherein the entity specific 
information comprises a company identification. 

44. (Original) A method according to Claim 40, wherein the cryptographic 
value comprises an RS A key and wherein the sr^p of selecting comprises selecting the RSA 
key from a portion of the range of potential RSA^ey values based on the entity specific 
information, wherein portion of the range of potential RSA key values is defined by mapping 
an entity specific range of values onto the range of porential key values. 

45. (Original) A method according to Clainv 40, further comprising the step of 
authenticating the source entity of the cryptographic value bysdetermining if the 
cryptographic value is within the range of cryptographic valuesVbased on the entity specific 
information associated with the source entity. \ 
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\46. (Original) A system for generating a cryptographic value corresponding to 
a source ^entity, comprising: 

mekns for obtaining entity specific information associated with the source entity; 

meanfe for selecting a cryptographic value from a range of cryptographic values based 
on the entity specific information, wherein the range of cryptographic values based on the 
entity specific information is disjoint with ranges of cryptographic values associated with 
entity specific information associated with entities other than the source entity. 

47. (Original), A system according to Claim 46, wherein the entity specific 
information comprises biometric information associated with a user. 

48. (Original) Avsystem according to Claim 46, wherein the entity specific 
information comprises a globally unique user identification associated with a user. 

49. (Original) A systemWcording to Claim 46, wherein the entity specific 
information comprises a company identification. 

50. (Original) A system accordmg to Claim 46, wherein the cryptographic 
value comprises an RS A key and wherein the means for selecting comprises means for 
selecting the RS A key from a portion of the range ofcpotential RSA key values based on the 
entity specific information, wherein portion of the range of potential RSA key values is 
defined by mapping an entity specific range of values onto the range of potential key values. 

5 1 . (Original) A system according to Claim 4cL further comprising means for 
authenticating the source entity of the cryptographic value by determining if the 
cryptographic value is within the range of cryptographic values b\sed on the entity specific 
information associated with the source entity. \ 
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(Original) A computer program product for generating a cryptographic 
value corresponding to a source entity, comprising: 

a computer readable storage medium having computer readable program code means 
embodied in sakl medium, said computer readable program code means comprising: 

computer\eadable program code means for obtaining entity specific information 
associated with the source entity; 

computer readable program code means for selecting a cryptographic value from a 
range of cryptographic values based on the entity specific information, wherein the range of 
cryptographic values basecl on the entity specific information is disjoint with ranges of 
cryptographic values associated with entity specific information associated with entities other 
than the source entity. \ 

53. (Original) A computer program product according to Claim 52, wherein 
the entity specific information composes biometric information associated with a user. 

54. (Original) A computer {program product according to Claim 52, wherein 
the entity specific information comprises a globally unique user identification associated with 
a user. \ 

55. (Original) A computer program jqroduct according to Claim 52, wherein 
the entity specific information comprises a company identification. 

56. (Original) A computer program product according to Claim 52, wherein 
the cryptographic value comprises an RSA key and wherein the computer readable program 
code means for selecting comprises computer readable program code means for selecting the 
RSA key from a portion of the range of potential RSA key valueVbased on the entity specific 
information, wherein portion of the range of potential RSA key vames is defined by mapping 
an entity specific range of values onto the range of potential key values. 
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57. (Originaiy^\A computer program product according to Claim 52, further 
comprising computer readable pro-am code means for authenticating the source entity of the 
cryptographic value by determining if thermographic value is within the range of 
cryptographic values based on the entity specific information associated with the source 



